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A data earner having a semiconductor chip (5) with at least one memory con- 
taining an operating program which is able to execute at least one operation 
(A), the execution of the operation (A) requiring input data (*) and the execution 
of the operation (A) generating output data O), characterized in that 
the operation (A) is disguised before its execution, 

- the disguised operation (A*, ) is executed with disguised input data 
(x <8> /?,), and 

- the disguising of the operation (A) and the input data (x) is coordinated 
such that the execution of the disguised operation (A*,) with disguised in- 
put data 0 ® yields output data (y) identical with the output data (y) 
determined upon execution of the undisguised operation (A) with undis- 
guised input data (x). 

A data carrier according to claim 1, characterized in that at least one random 
number (/?,) enters into the determination of the disguised operation (h M ) and 
the disguised input data (x <8> Ry). 

A data carrier according toother offeS^' clainjij characterized in that the 
determination of the disguised operation (A*,) and the disguised input data 
(x <8> /?,) is effected with the aid of EXOR operations. 

A data carrier according to^y of^^e'claimj/ characterized in that the 
disguised operation (A*,) is permanently stored in the data carrier in advance. 
A data carrier according to claim 4, characterized in that at least two disguised 
operations (A*,, h RV ) are permanently stored in the data carrier in advance and 
one of the stored disguised operations (A*,, h RV ) is selected randomly when a 
disguised operation is to be executed. . 

A data carrier according tofer ofSfeSTi'to j? characterized in that the dis- 
guised operation (A*,) is recalculated before its execution and the at least one 
random number (/?,) is redetermined for said calculation. 
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9. 



7- A data carrier according tofe ofifeabo^ claing characterized in that the 
operation (/,) is realized by a table stored in the data earner which establishes 
an association between the input data (x) and the output data (y). 
8. A data earner according to claim 7, characterized in that the disguising of the 
input data (.r) contained in the table is effected by combination with the at least 
one random number (R x ). 

A data carrier having a semiconductor chip (5) with at least one memory con- 
taming an operating program which is able to execute at least one operation 
(AX the execution of the operation (A) requiring input data (*) and the execution 
of the operation (h) generating output data (y), characterized in that 
the operation (h) is disguised before its execution, 

- the disguised operation (h RX ) is executed with disguised input data 

- the disguising of the operation (h) and the input data (x) is coordinated 
such that the execution of the disguised operation W with disguised 
input data (x ® *,) yields output data (y ® R 2 ) which are disguised rela- 
tive to the output data (y) determined upon execution of the undisguised 
operation (h) with undisguised input data (*), and 

- the undisguised output data (y) can be determined from the disguised out- 
put data O ® R 2 ) with the aid of data (R 2 ) used for disguising the opera- 
tion (A). 

A data carrier according to claim 9, characterized in that at least one random 
number (*,) enters into the determination of the disguised input data (x ® 
and at least two random numbers (/?,, R 2 ) enter into the determination of the 
disguised operations (h RlR2 ). . 
1 1 A data carrier according togjther ot^m7 9 and & characterized in that the 
determination of the disguised operation (h R}R2 ) and the disguised input data 
(x ® /?,) is effected with the aid of EXOR operations. 
12. A data carrier according to&y o?ctm^to 1 j? charactenzed in that the dis- 
guised operation (h RlR2 ) is permanently stored in the data carrier in advance. 
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15. 



A data carrier according to claim 12, characterized in that at least two dis- 
guised operations (h RlR2 , W) m permanently stored in the data carrier in 
advance and one of the stored d.sgursed operations ( W W) is seIected 
randomly when a disguised operation is to be executed. 
A data carrier accordmg to claim 13, charactenzed in that the random numbers 
(*., R 2 ) for determining the first disguised operation (h R1R2 ) are inverse to the 
random numbers W . R 2 ') for determining the second disguised operation 
(W) with respect to the combination used for determining the disguised 
operations (h RlR2 , h RVRT ). 

A data carrier according to^y o9k^9 to uj characterized in that the dis- 
guised operation (h R1R2 ) is recalculated before its execution and the random 
numbers (R u R 2 ) are redetermined for said calculation. 
16. A data carrier according t<^S&fi£9& ij characterized in that the op- 
eration (A) is realized by a table stored in the data carrier which establishes an 
association between the input data (x) and the output data 0). 
L7. A data carrier according to claim 16, characterized in that the disguising of the 
input data (*) contained in the table is effected by combination with the at least 
one random number (*,) and the disguising of the output data (y) contained in 
the table is effected by combination with the at least one further random num- 
ber (R 2 ). 

8. A data carrier according togiy of the above claims 7 , characterized in that the 
operation (h) is a nonlinear operation with respect to the combination used for 
disguising the operation (h). 



